Dinasan LLC

Scout Privacy Policy

This policy explains how Scout handles information across its mobile app, operator website, and public website.

Effective and last updated August 11, 2026

Information we collect

Account and store information

We process account email addresses, names, roles, store membership, authentication state, and security events for restaurant operators and shift leaders. Restaurants provision these accounts; Scout does not offer public account creation.

Roster and station information

Restaurants may provide team-member names, nicknames, active status, and limited roster identifiers. Scout records station and off-floor events, including the selected person, station, actor, and timestamp, to show current floor placement and preserve operational history.

Operational checks and photos

Scout processes store-created form definitions and submitted answers, notes, ratings, numbers, findings, timestamps, and station or person associations. If a form permits photos, a user may take or select a photo and upload it to private store-scoped storage. Scout requests camera or photo access only when the user chooses that action.

Learning information

Scout processes store-created pathways, assignments, enrollment status, progress, sign-off and correction history, verifier information, and linked evidence so restaurants can manage role-based learning.

Website inquiries

If you request access or contact us through the public website, we may receive your name, email address, store address, role, and the delivery metadata needed to respond.

Technical information

Scout and its infrastructure providers process session identifiers, IP addresses and request metadata, app or browser and device information, timestamps, authentication and audit events, and error information needed to operate, secure, and troubleshoot the service.

How we use information

• Provide station tracking, operational checks, private photo evidence, learning pathways, and authorized review.
• Authenticate users and enforce store, role, and multi-factor access controls.
• Maintain data integrity, retry safety, audit history, and security.
• Respond to support, access, privacy, and legal requests.
• Understand and improve reliability and usability without advertising tracking.

AI and automated analysis

The version 1 Scout mobile app contains no AI model integration and does not send mobile data directly to an AI provider. Scout's separate retraining and recommendation worker is not enabled for version 1 production. We will update this policy, our service-provider disclosures, and applicable app-store disclosures before enabling a production feature that sends customer data to an AI provider.

How we disclose information

We disclose information only as needed to the restaurant customer, to authorized users in that restaurant, and to service providers that operate Scout under contractual data-protection obligations. Current providers include Supabase for the product backend, Vercel for website and server hosting, and Resend for public access-request email delivery. Apple and Expo support mobile build and distribution but are not intentionally sent Scout operational records.

We may also disclose information when required by law, to protect users or the service, to investigate fraud or security incidents, or as part of a business transaction subject to appropriate safeguards.

No sale, advertising, or tracking

Scout does not sell personal information, share it for cross-context behavioral advertising, serve third-party ads, or track people across unrelated apps or websites. Scout does not request microphone, contacts, precise location, or advertising-tracking permission.

Retention and deletion

We retain information while the restaurant remains an active customer. After a verified customer termination or deletion request, we delete customer data from active systems within 30 days unless we must retain specific records for security, fraud prevention, disputes, legal compliance, or another documented obligation. Remaining backup copies are removed through normal backup rotation within 90 days.

Your choices and requests

You may decline camera or photo access and use Scout features that do not require a photo. Restaurant operators manage Scout accounts and workforce records. To request access, correction, deletion, or a copy of personal information, contact your restaurant or email hello@scout.restaurant. We may verify your identity and coordinate with the restaurant that controls the data before completing a request.

California privacy rights

If the California Consumer Privacy Act applies, California residents may have rights to know, access, correct, or delete personal information; to limit certain uses of sensitive information; and to opt out of sale or sharing. Scout does not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against a person for making a valid privacy request. Authorized agents may submit requests, subject to identity and authority verification.

Security

Scout uses role- and store-scoped access controls, multi-factor requirements for privileged actions, encrypted network transport, private media storage, bounded server APIs, and audit history. No system can guarantee absolute security, so please report suspected unauthorized access promptly.

Children

Scout is a business service and is not directed to children under 13. Children may not create Scout accounts. A restaurant may maintain limited workforce records for younger team members when permitted by law and remains responsible for the legal basis and notices for those records.

United States service

Version 1 is offered in the United States. Information is processed in the United States or in locations used by our service providers under their applicable terms and safeguards.

Changes to this policy

We may update this policy as Scout changes. We will post the revised policy here with a new effective date and provide additional notice when required.